Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: tRxlqjRMIHyPxFu8dogEAtPEznM3j0zFy1bvrJ1vkX4=
Subject key identifier: C0:9E:0B:9D:C7:BD:9E:FD:AD:2D:D2:0E:07:B7:D5:1D:4B:F8:37:3E
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 0194BC72E6C53232F7A84AB6C383B93B4928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: U25u838iYTHQpusyAM6XDLpFH+tMq6oPqGaIyaD0IEQ=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:c5:32:32:f7:a8:4a:b6:c3:83:b9:3b:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=c09e0b9dc7bd9efdad2dd20e07b7d51d4bf8373e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:a4:65:7c:58:7a:e1:35:70:61:d6:45:e6:
22:af:dd:13:1d:58:dd:68:fd:c4:2c:be:e1:9e:90:
46:37:ac:b6:56:7a:bf:ca:47:94:76:a9:f0:6a:2a:
79:0d:2e:99:f9:63:9f:ce:10:86:7b:cf:71:c1:f1:
13:13:f8:27:99:86:d1:31:8e:9b:b8:1d:3c:c5:5c:
4a:f5:6b:aa:a5:eb:5d:ec:5e:8f:43:34:77:57:0c:
ed:01:fc:65:6b:70:12:9f:72:da:88:f0:30:cf:92:
98:95:e5:9f:c6:eb:9f:5b:c7:69:70:a0:3e:45:82:
b0:ac:44:f4:c6:58:0e:7a:33:38:06:a4:ad:5d:30:
69:7b:99:f8:fe:e5:1f:39:6c:3c:6d:b3:9c:03:ad:
39:21:42:f6:83:83:44:6c:29:c9:91:0c:2b:9f:5c:
c0:55:54:fb:2d:9c:52:87:01:c2:a2:48:3c:27:a0:
13:67:78:c1:a6:dd:42:4d:6a:73:53:68:3a:dc:85:
f8:83:ac:5a:94:c9:37:b3:20:f3:2e:4a:3b:54:ef:
bb:e1:16:18:8e:0c:35:6b:79:ee:66:95:0f:02:df:
8d:e7:f0:b4:c2:a5:eb:1d:4a:1e:05:c6:4b:b4:f7:
dc:70:89:f6:17:71:f6:e5:70:4e:20:0d:9d:59:20:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9E:0B:9D:C7:BD:9E:FD:AD:2D:D2:0E:07:B7:D5:1D:4B:F8:37:3E
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:21:36:33:3d:87:ec:e8:dd:a4:fe:89:b2:c1:90:28:36:3f:
07:86:3f:7e:59:1b:d5:0e:72:4c:49:5e:f0:b1:31:57:57:ac:
54:13:a5:43:56:ae:20:bd:b1:37:ec:d8:5b:15:5c:7c:e1:dd:
da:a8:e3:8a:b7:a2:49:91:76:17:6f:c2:fe:33:66:97:75:b3:
9a:0b:af:70:b6:e8:eb:a3:e3:b5:35:2c:30:2c:e0:1d:e0:13:
86:03:ec:f8:aa:74:a8:d4:b2:bf:4d:de:14:c3:a7:80:ed:0b:
a8:05:9f:47:4c:01:a5:fc:ea:3c:ec:17:2b:97:1a:91:10:37:
74:e8:7b:a4:f9:29:8b:f6:f3:2b:c3:b2:6d:cf:10:bc:3c:af:
58:aa:1b:42:7c:f9:9a:51:6e:9a:42:a3:a6:b9:73:5f:82:31:
41:ff:39:09:98:ef:06:0f:78:f6:61:16:4b:7d:a1:2c:54:a3:
25:09:fc:58:d5:e6:27:8f:15:ca:a9:0c:36:f4:8f:b0:eb:fe:
60:6a:16:24:36:0f:60:94:f9:f2:52:d7:d4:14:07:27:80:c9:
6c:4b:c4:e6:d6:7a:f7:7f:9a:5f:fd:1f:e7:5a:f2:65:b5:e6:
65:f0:be:c6:51:e5:c4:66:36:84:04:7a:b3:75:b6:f8:49:1f:
30:9b:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client